$ rpki-client -vvf rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft File: LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft (raw, json) Hash identifier: 2ptF8ht4/FrbTEQTwnffEo+lg96UHScZKqcSuVULz0M= Subject key identifier: 17:9B:AA:04:19:E7:FD:C9:70:8B:41:B5:C5:E9:30:02:4C:F6:7B:FB Authority key identifier: 2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B Certificate issuer: /CN=A9165456/serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B Certificate serial: 0A8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft Manifest number: 0A76 Signing time: Fri 30 May 2025 19:48:09 +0000 Manifest this update: Fri 30 May 2025 19:48:08 +0000 Manifest next update: Fri 06 Jun 2025 19:48:08 +0000 Files and hashes: 1: LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl (hash: 2R6EJPrulOJXvrwqFaig0H6X5zf7yEXoyn/0HAdpREA=) 2: 5ABD5A320D7A11EB9D346C48C4F9AE02.roa (hash: 5TpXg41XhGRSVvUHK5XRVEgpyHLz9AA+kgJTUOprqi0=) 3: 5977CEE60D7A11EB9D346C48C4F9AE02.roa (hash: TRrnPYrOalEPWz9T5KXn22gUrdAbwDlWLGBn2HbQ6ag=) 4: 5A15EA040D7A11EB9D346C48C4F9AE02.roa (hash: 2Lal6Hihil8XYkgrg/1JrJLddglMRFIWSjh8Zg5doPM=) 5: 9A6A637EF48C11EBBDF92914C4F9AE02.roa (hash: 29WR9bK+1J7teRj22ZLgNx6ODw6+LHNBzuwuJrvhB0E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:48:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2698 (0xa8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165456, serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B Validity Not Before: May 30 19:48:08 2025 GMT Not After : Jun 6 19:48:08 2025 GMT Subject: CN=683a0b79-89ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1e:18:e7:98:bd:4f:3a:76:17:43:91:09:bc: 92:86:95:ec:7a:96:86:94:f4:9e:6f:5f:0d:bb:17: 54:65:64:79:8a:f1:46:e7:d9:fd:71:30:46:f6:e5: c0:c5:1f:91:67:ee:2f:02:47:1a:6c:ad:d2:0a:38: 56:54:be:ef:c9:6e:48:66:1f:55:be:c6:45:37:2b: eb:3d:16:44:7f:17:17:8c:aa:3a:ee:7f:22:94:de: 02:75:58:37:d0:f8:97:31:12:00:6a:c7:c1:79:e4: 8a:0d:5e:91:36:f4:97:40:89:e9:06:ca:96:4f:d6: f1:41:34:e6:37:29:17:f9:46:1f:c9:d7:25:dd:3f: 38:8d:71:5c:af:29:30:2c:54:8f:0b:5f:85:26:54: 8b:e0:4f:4f:09:69:de:50:c2:7e:55:04:3e:d6:87: 8e:f5:5d:d8:c7:46:d6:84:4c:09:cb:a8:58:2e:92: 35:db:62:5e:8d:2e:bc:e4:93:4d:a7:3f:e6:76:da: 38:a6:4b:e3:1d:d7:4b:86:73:26:25:5b:b9:3a:5d: 44:97:9f:d7:c5:e9:31:ad:1b:58:59:46:63:9b:0c: a9:d7:07:28:23:57:96:09:5d:60:16:3a:e7:7c:a5: 3c:49:22:ac:b2:ab:13:b2:f0:64:b3:af:f8:f8:52: f5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:9B:AA:04:19:E7:FD:C9:70:8B:41:B5:C5:E9:30:02:4C:F6:7B:FB X509v3 Authority Key Identifier: keyid:2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:7b:7d:d2:f3:77:0e:90:60:76:32:fa:12:d3:ba:af:ab:43: df:b5:7a:aa:0a:af:a4:9f:6b:f7:eb:c5:c8:3a:75:92:d3:e3: d3:8e:6a:02:6d:ad:84:d1:3e:fb:22:7c:20:3c:69:b8:ea:d0: d5:18:1e:90:94:6f:cd:c5:87:f8:b5:42:f0:00:a4:13:fa:80: f5:e2:ab:9e:4a:1b:bf:0b:8d:22:8a:3e:05:4c:27:93:67:1c: cf:55:15:9b:7f:fa:82:c1:02:ac:53:94:9e:a3:bc:23:e4:49: 50:a0:0a:a6:e8:db:91:f3:d1:9f:7f:91:0e:8f:46:ac:58:c3: 9c:08:9b:8d:21:7b:82:f3:68:4f:9f:c6:11:3f:a5:27:f3:1a: 8f:52:f1:04:c3:88:b2:22:33:df:3b:e2:c3:9e:7a:7b:be:db: 59:aa:79:7d:90:b8:e5:02:6b:65:3e:5f:ae:49:50:88:61:b3: ef:b6:c4:af:1d:2c:36:77:7c:39:bd:6c:aa:f3:53:e2:7d:1c: 4a:0a:33:64:97:f3:b4:13:46:4f:2b:20:1d:20:f8:dc:c9:ba: 32:29:4b:f1:6f:9f:88:7f:df:48:2e:23:94:bf:95:53:d4:31: 1f:3a:89:cb:e5:2c:a3:ad:fb:d4:78:6e:13:a9:e2:06:f5:db: 43:7c:b1:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU0NTYxMTAvBgNVBAUTKDJDRTExMDA4RDJFMDNGRUIzRTYzN0FENEY3RTcyNzJF REM2MEQ1M0IwHhcNMjUwNTMwMTk0ODA4WhcNMjUwNjA2MTk0ODA4WjAYMRYwFAYD VQQDEw02ODNhMGI3OS04OWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwx4Y55i9Tzp2F0ORCbyShpXsepaGlPSeb18NuxdUZWR5ivFG59n9cTBG9uXA xR+RZ+4vAkcabK3SCjhWVL7vyW5IZh9VvsZFNyvrPRZEfxcXjKo67n8ilN4CdVg3 0PiXMRIAasfBeeSKDV6RNvSXQInpBsqWT9bxQTTmNykX+UYfydcl3T84jXFcrykw LFSPC1+FJlSL4E9PCWneUMJ+VQQ+1oeO9V3Yx0bWhEwJy6hYLpI122JejS685JNN pz/mdto4pkvjHddLhnMmJVu5Ol1El5/XxekxrRtYWUZjmwyp1wcoI1eWCV1gFjrn fKU8SSKssqsTsvBks6/4+FL15QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBebqgQZ 5/3JcItBtcXpMAJM9nv7MB8GA1UdIwQYMBaAFCzhEAjS4D/rPmN61PfnJy7cYNU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTQ1Ni8yMzc4RTA4MDVF RTUxMUVBQUE1MkRFNDdDNEY5QUUwMi9MT0VRQ05MZ1Atcy1ZM3JVOS1jbkx0eGcx VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xPRVFDTkxnUC1zLVkzclU5LWNuTHR4ZzFUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTQ1Ni8yMzc4RTA4MDVFRTUxMUVBQUE1MkRFNDdDNEY5QUUwMi9MT0VRQ05MZ1At cy1ZM3JVOS1jbkx0eGcxVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCre33S83cOkGB2MvoS07qvq0PftXqqCq+kn2v368XIOnWS0+PTjmoC ba2E0T77InwgPGm46tDVGB6QlG/NxYf4tULwAKQT+oD14queShu/C40iij4FTCeT ZxzPVRWbf/qCwQKsU5Seo7wj5ElQoAqm6NuR89Gff5EOj0asWMOcCJuNIXuC82hP n8YRP6Un8xqPUvEEw4iyIjPfO+LDnnp7vttZqnl9kLjlAmtlPl+uSVCIYbPvtsSv HSw2d3w5vWyq81PifRxKCjNkl/O0E0ZPKyAdIPjcyboyKUvxb5+If99ILiOUv5VT 1DEfOonL5SyjrfvUeG4TqeIG9dtDfLG1 -----END CERTIFICATE-----Generated at Sat May 31 17:56:19 2025 by rpki-client